CVE-2024-44994

CVE-2024-44994

High · published September 5, 2024

CVSS v3.1
8.8
EPSS
0%
Percentile
8.6
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

iommu: Restore lost return in iommu_report_device_fault()

When iommu_report_device_fault gets called with a partial fault it is

supposed to collect the fault into the group and then return.

Instead the return was accidently deleted which results in trying to

process the fault and an eventual crash.

Deleting the return was a typo, put it back.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00194 · 8.6th percentile
Published
2024-09-05T00:15Z
Affected products (4)
ProductVersionsFixed in
linux/linux_kernel≥ 6.9, < 6.10.76.10.7
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (2)
EPSS history
Timeline
  • 04 SEP 19:54Z
    iommu: Restore lost return in iommu_report_device_fault()
    cvelistv5